Mobility Engineer / Architect

Vanguard; Wayne (PA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Vanguard in Wayne, PA is seeking a mobility platform engineer to act as a technical SME for enterprise mobility, focusing on Intune, MDM, and app protection across iOS/Android. This hybrid role requires onsite Tue-Thu in Wayne, PA or at Charlotte, NC or Dallas, TX locations.

You will design secure, usable configurations, shape the mobility roadmap, mentor junior engineers, and partner with vendors like Microsoft, Jamf, and Workspace ONE to balance ROI and operational excellence.

Qualifications

• Undergraduate degree in a related field or equivalent experience.
• 5+ years of relevant experience in endpoint management, enterprise mobility, end user computing, or platform engineering roles.
• Recognized as a technical expert whose judgment and leadership - not technical depth alone - distinguish them, with demonstrated strategic agility and the ability to identify a clear and concise path forward.
• A credible voice at the table who can influence and persuade audiences ranging from internal clients to senior leadership, and who is able to serve in an advisory role.
• Demonstrated client experience focus, with the ability to translate business requirements into solutions, implementation approaches, timelines, and risk assessments.
• Ability to validate the work of junior and intermediate engineers and act as an informal player

Responsibilities

• Serve as a technical SME for enterprise mobility, focusing on Intune, MDM, app protection, and policy-driven controls.
• Propose solutions with timelines, risks, and cross-team coordination for feasibility and approval.
• Design app protection, conditional access, compliance, and MDM configurations balancing security and usability.
• Shape the mobility product roadmap and contribute to future-state discussions.
• Validate junior and intermediate engineers' work and mentor succession in the mobility domain.
• Collaborate with vendors (Microsoft, Jamf, Workspace ONE) evaluating offerings with ROI and cost awareness.
• Identify process improvements to modernize engineering practices and reduce overhead.
• Build automation within your domain to improve efficiency and consistency.
• Use data to support decisions and present solutions that are near-ready for final review.

Skills

Intune expert

Endpoint management

Conditional access

Automation scripting

Cross-functional collaboration

Vendor governance

Education

Undergraduate degree in a related field

Tools

Microsoft Intune

Workspace ONE

Microsoft Entra ID

Jamf

Job description

This opportunity follows a hybrid schedule. Onsite Tuesday, Wednesday Thursday in the following locations: Wayne, PA, Charlotte, NC or Dallas, TX.

In this role, you will:

• Serve as a technical subject matter expert for enterprise mobility within your area of responsibility and across adjacent, cross-functional domains, engineering and governing solutions built on Microsoft Intune, app protection, Workspace ONE MDM, mobile application management, and policy-driven endpoint controls.
• Take business problems or new requirements and use your platform and technical expertise to propose solution options, an implementation approach, timeline, and potential risks, then organize support from peer teams to confirm feasibility and obtain agreement.
• Demonstrate a strong client experience focus by understanding the impact of change on the end user, designing app protection, conditional access, compliance, and MDM configurations that balance security, usability, and operational supportability.
• Create or strongly influence the mobility product roadmap, adding thought leadership to future-state discussions and applying a strategic lens to roadmap and scoping conversations.
• Validate the solutions of junior and intermediate engineers, providing guidance to ensure the quality of deliverables and key outcomes, and act as an informal player-coach who mentors and builds a succession bench for the mobility domain.
• Collaborate with and build strong relationships with technical vendors (e.g., Microsoft, Jamf, Omnissa/Workspace ONE), driving and validating technical discussions and evaluating product offerings with fiscal discipline and a clear view of ROI and operating cost.
• Recognize broken processes and continuous improvement opportunities, then self-direct the tasks and changes needed to modernize and streamline engineering practices for a better outcome.
• Identify and build automation within your domain and across domains to reduce operational overhead, drive efficiency, and increase focus on engineering prowess.
• Use data to support decision-making and justify recommendations, bringing forward solutions that are approximately 90% of the way there and ready for final review.
• Partner with identity, security, and access management teams to align mobility controls with enterprise authentication, access, and data protection strategies across iOS, Android, and cross-platform endpoints.
• Ensure service transition activities are thorough and complete, including automation and best-in-class operational readiness deliverables, and participate in developing engineering policies, standards, and procedures.
• Clarify ambiguity and communicate concisely to non-technical leaders and clients, influencing and persuading across audiences from internal partners to senior leadership.

Technical Requirements:

• Deep, hands-on experience with Microsoft Intune, including device configuration, compliance policies, configuration profiles, app deployment, and mobile application management/app protection capabilities.
• Strong experience implementing and governing conditional access policies in partnership with identity and security stakeholders.
• Expertise in MDM and endpoint management controls across mobile platforms, including policy design, restrictions, security settings, and enrollment models.
• Solid understanding of modern authentication, device compliance, access control, and endpoint security concepts in enterprise environments.
• Experience engineering end user management solutions for iOS and Android in large-scale or highly regulated environments.
• Familiarity with Microsoft Entra ID, identity-based access patterns, and device trust models.
• Experience building automation (e.g., scripting, configuration-as-code, or pipeline-driven changes) to reduce operational overhead and improve consistency.
• Ability to create technical guidance, configuration standards, and reference patterns for engineering and support teams, and to validate the work of junior and intermediate engineers.
• Experience working across cross-functional teams to align platform strategy, security requirements, and user enablement goals.

What it takes:

• Undergraduate degree in a related field or equivalent experience.
• 5+ years of relevant experience in endpoint management, enterprise mobility, end user computing, or platform engineering roles.
• Recognized as a technical expert whose judgment and leadership - not technical depth alone - distinguish them, with demonstrated strategic agility and the ability to identify a clear and concise path forward.
• A credible voice at the table who can influence and persuade audiences ranging from internal clients to senior leadership, and who is able to serve in an advisory role.
• Demonstrated client experience focus, with the ability to translate business requirements into solutions, implementation approaches, timelines, and risk assessments.
• Ability to validate the work of junior and intermediate engineers and act as an informal player